lotecruz.org.co/css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt
190.61.25.23301 Moved Permanently 162 B URL HTTP/1.1 lotecruz.org.co/css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt
IP 190.61.25.23:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert quad9 Sinkholed
GET /css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt HTTP/1.1
Host: lotecruz.org.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 17 Sep 2022 12:53:17 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://lotecruz.org.co/css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 96daaf84cd2c07756756caf7a2724a29
d24d47c68eec98d44bf341dab9d893df97103e1a
fef9ce9f75ec19e7ae2ccbffb6654db2473a2b4acc94c1b4303e5ec24149465f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FEF9CE9F75EC19E7AE2CCBFFB6654DB2473A2B4ACC94C1B4303E5EC24149465F"
Last-Modified: Thu, 15 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6737
Expires: Sat, 17 Sep 2022 14:45:13 GMT
Date: Sat, 17 Sep 2022 12:52:56 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
143.204.55.36200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.36:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 17 Sep 2022 12:11:23 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1v6oX5uHLaKeORMWRr2J_ASAGX-oHx6k2mVwfGDbSFyt2yR-hydiEA==
Age: 2493
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.110200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.110:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 17 Sep 2022 04:35:16 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TP_oah--mqzA7ftkuF9IDcqcUcawuWg8-qnviGMRgmVd_bEs6cLuPQ==
age: 33734
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 12:52:56 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.36200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.36:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sat, 17 Sep 2022 12:03:22 GMT
Cache-Control: max-age=3600
Expires: Sat, 17 Sep 2022 12:16:15 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: b5oly1wRRUYTD_fUqOxsTi5z48Bkk1ePbmMywZAFwGRPIPi8e8BnAw==
Age: 2975
ocsp.godaddy.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash 63c9905d2b4f094fee45c165fed199ea
1ca47918c610b9473f3b5a4e1f7dcbac977d2fb5
9e9c220921f0594b94f4bebdf6c4ca7077daec014ba975f83e4ed5cb7c333162
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 17 Sep 2022 12:52:57 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 16 Sep 2022 22:18:25 GMT
Expires: Sat, 17 Sep 2022 22:18:25 GMT
ETag: "1ca47918c610b9473f3b5a4e1f7dcbac977d2fb5"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 9bf3402af9fef57aa11ffe2943728de4
a3a443aab8226d212be9698623717dd06e46c720
54987a5417af4a99d78532e502cf4685dd3372c1e9f717a8907f3d2b7c8926eb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2046
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:52:57 GMT
Last-Modified: Sat, 17 Sep 2022 12:18:51 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
52.39.57.61101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.39.57.61:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: VK0UIRJu0llBCKQK4bwVeA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ceDUL8VJOfSJFxN2nFp5OYE81h0=
lotecruz.org.co/css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt
190.61.25.23404 Not Found 10 kB URL HTTP/2 lotecruz.org.co/css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt
IP 190.61.25.23:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (11850)
Hash 08923bce1c4b80dd1fed000d390130a6
cde249b7fdcb0469663f3c117b0c4767007ce259
bdda0c474f0af451f03c5a54a1c5978b9c0c60a1c5d7b02b59fd45d388068915
Analyzer Verdict Alert quad9 Sinkholed
GET /css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt HTTP/1.1
Host: lotecruz.org.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 404 Not Found
server: nginx
date: Sat, 17 Sep 2022 12:53:18 GMT
content-type: text/html; charset=UTF-8
content-length: 10530
x-powered-by: PHP/7.4.30
expires: Wed, 11 Jan 1984 05:00:00 GMT
link: <https://lotecruz.org.co/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cache-control: no-cache, must-revalidate, max-age=0, max-age=600, private, must-revalidate
X-Firefox-Spdy: h2
code.jquery.com/ui/1.12.1/themes/base/jquery-ui.css
69.16.175.42200 OK 8.3 kB URL HTTP/2 code.jquery.com/ui/1.12.1/themes/base/jquery-ui.css
IP 69.16.175.42:0
File type ASCII text, with very long lines (2363)
Hash 5f648878fbbe3dda9cfbee54e62c3f90
e1d85dd9613b00d065a88b00347e46cf124b464a
6e3e4c70fc6aa5cc461500bc931843ca58f300c8627b1e7c6cfab7fb083f850f
GET /ui/1.12.1/themes/base/jquery-ui.css HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 17 Sep 2022 12:52:57 GMT
content-encoding: gzip
content-length: 8323
content-type: text/css
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
accept-ranges: bytes
server: nginx
etag: W/"28feccc0-8c85"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1663419177.dop207.sk1.t,1663419177.cds228.sk1.hn,1663419177.cds066.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 4cc0aaf293fed6c16e1dde02c50c8f40
e94f11cd8fa955f28856a02aa7115aa5f3626d98
b1592dc8fc0d63052f66b7be9b5ff1f562f6fbd05f6365ce828758bfbb3f1a12
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:52:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 4cc0aaf293fed6c16e1dde02c50c8f40
e94f11cd8fa955f28856a02aa7115aa5f3626d98
b1592dc8fc0d63052f66b7be9b5ff1f562f6fbd05f6365ce828758bfbb3f1a12
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:52:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
code.jquery.com/ui/1.12.1/jquery-ui.js
69.16.175.42200 OK 124 kB URL HTTP/2 code.jquery.com/ui/1.12.1/jquery-ui.js
IP 69.16.175.42:0
File type ASCII text, with very long lines (1002)
Size 124 kB (124434 bytes)
Hash 2c20d94f200cc85f5f03b61baf0fbfca
23b24e5397703a1c2484b018986036024f10745a
d2dae630b0d5251b8bfb435c111fba839684f23f07d7471f6d2bc3bee597b9e3
GET /ui/1.12.1/jquery-ui.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 17 Sep 2022 12:52:57 GMT
content-encoding: gzip
content-length: 124434
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:40 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd700-7f20a"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1663419177.dop207.sk1.t,1663419177.cds228.sk1.hn,1663419177.cds261.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 5d12cc59489773babbc650161772d674
6fa23d626e8a64d98e59984567cd4dc42c648833
f43eae2b85acffc988fbc2c97e18ae1c013217db2cbe24df14dd3b8c35d0ff27
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:52:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-NCC33VD
142.250.74.72200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NCC33VD
IP 142.250.74.72:0
File type ASCII text, with very long lines (1720)
Hash 08803d0d3f70ceafe2bceba030fc7053
7ed5fb8df937779c7b6b9f8b4818b78eeac47ee6
8baa343348ede1ebbfb509d048e80a127c48f498c365ce16e5f5ab90b9837cf5
GET /gtm.js?id=GTM-NCC33VD HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 17 Sep 2022 12:52:57 GMT
expires: Sat, 17 Sep 2022 12:52:57 GMT
cache-control: private, max-age=900
last-modified: Sat, 17 Sep 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44502
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 4cc0aaf293fed6c16e1dde02c50c8f40
e94f11cd8fa955f28856a02aa7115aa5f3626d98
b1592dc8fc0d63052f66b7be9b5ff1f562f6fbd05f6365ce828758bfbb3f1a12
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:52:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 4cc0aaf293fed6c16e1dde02c50c8f40
e94f11cd8fa955f28856a02aa7115aa5f3626d98
b1592dc8fc0d63052f66b7be9b5ff1f562f6fbd05f6365ce828758bfbb3f1a12
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:52:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 5d12cc59489773babbc650161772d674
6fa23d626e8a64d98e59984567cd4dc42c648833
f43eae2b85acffc988fbc2c97e18ae1c013217db2cbe24df14dd3b8c35d0ff27
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:52:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lotecruz.org.co/wp-content/cache/wmac/css/wmac_single_a487264dd8942420c8906d8ba170cc13.css
190.61.25.23200 OK 78 kB URL HTTP/2 lotecruz.org.co/wp-content/cache/wmac/css/wmac_single_a487264dd8942420c8906d8ba170cc13.css
IP 190.61.25.23:0
File type ASCII text, with very long lines (32828), with no line terminators
Hash 6b1318dcf5fc86d21d33cfa2fcc2a998
d27b01af3046360343997126d5cca9c326bba4bb
be5df622f4f64d4e6c8e54454698bf833c653d9042e058a15e61ff14bd332936
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/cache/wmac/css/wmac_single_a487264dd8942420c8906d8ba170cc13.css HTTP/1.1
Host: lotecruz.org.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 12:53:19 GMT
content-type: text/css
last-modified: Thu, 03 Dec 2020 21:33:04 GMT
cache-control: max-age=604800, public
expires: Thu, 07 Sep 2023 12:53:19 GMT
etag: W/"5fc95990-803c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 8fb510c0e0fbff6302a68eb385520e3f
cd5149c6ffc7ee3d90e9e6884af8e02f44c7ab00
2b9cd0f540eb0916ad5c3ee63dbc8ee57570c3eaae7aeabca5c8cb03a3c73c32
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:52:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 8fb510c0e0fbff6302a68eb385520e3f
cd5149c6ffc7ee3d90e9e6884af8e02f44c7ab00
2b9cd0f540eb0916ad5c3ee63dbc8ee57570c3eaae7aeabca5c8cb03a3c73c32
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:52:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.163200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lotecruz.org.co
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Sep 2022 08:31:01 GMT
expires: Wed, 13 Sep 2023 08:31:01 GMT
cache-control: public, max-age=31536000
age: 361317
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
142.250.74.163200 OK 48 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 47952, version 1.0\012- data
Hash 17b406b7b8caa297435fa358e194f5a1
e2132f0e97781af56fa966c0fabb49132f2af203
84161c46238fff2c6920ebc28f02cddd7b710cf3d1107853f540b084320f6afd
GET /s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lotecruz.org.co
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47952
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Sep 2022 18:59:14 GMT
expires: Tue, 12 Sep 2023 18:59:14 GMT
cache-control: public, max-age=31536000
age: 410024
last-modified: Mon, 15 Aug 2022 18:22:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 8fb510c0e0fbff6302a68eb385520e3f
cd5149c6ffc7ee3d90e9e6884af8e02f44c7ab00
2b9cd0f540eb0916ad5c3ee63dbc8ee57570c3eaae7aeabca5c8cb03a3c73c32
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:52:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lotecruz.org.co/wp-content/uploads/2019/05/Logolote-01.jpg
190.61.25.23200 OK 65 kB URL HTTP/2 lotecruz.org.co/wp-content/uploads/2019/05/Logolote-01.jpg
IP 190.61.25.23:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=491, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1636], baseline, precision 8, 785x236, components 3\012- data
Hash 7c8286b17acd46c01a821c6d21d3ecb8
3bcd088321a92108e000fd3a8c6b0f62afd021de
600c5c5cd478ca91cbd357279351e8c1ee37b12e45fd61a58f75ceb896a8430e
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2019/05/Logolote-01.jpg HTTP/1.1
Host: lotecruz.org.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 12:53:19 GMT
content-type: image/jpeg
content-length: 64654
last-modified: Wed, 14 Oct 2020 01:36:39 GMT
cache-control: max-age=2592000, public
expires: Mon, 17 Oct 2022 12:53:19 GMT
etag: "5f865627-fc8e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
lotecruz.org.co/wp-content/uploads/2019/05/cruz-01.jpg
190.61.25.23200 OK 28 kB URL HTTP/2 lotecruz.org.co/wp-content/uploads/2019/05/cruz-01.jpg
IP 190.61.25.23:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=251, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=908], baseline, precision 8, 434x120, components 3\012- data
Hash 0363a81681f7dd2bde4064259895824e
e958510844be1b585f6e00cf246ad866256b357f
db94a065043ab0cb7d37063fc461e82cd6dc078268da4a62052edc1738ba0e16
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2019/05/cruz-01.jpg HTTP/1.1
Host: lotecruz.org.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 12:53:19 GMT
content-type: image/jpeg
content-length: 27823
last-modified: Wed, 14 Oct 2020 01:36:38 GMT
cache-control: max-age=2592000, public
expires: Mon, 17 Oct 2022 12:53:19 GMT
etag: "5f865626-6caf"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
lotecruz.org.co/wp-content/uploads/2021/11/Pestan%CC%83a_Web_284x213px_Mesa_de_trabajo_1.jpeg.jpg
190.61.25.23200 OK 101 kB URL HTTP/2 lotecruz.org.co/wp-content/uploads/2021/11/Pestan%CC%83a_Web_284x213px_Mesa_de_trabajo_1.jpeg.jpg
IP 190.61.25.23:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1184x888, components 3\012- data
Size 101 kB (100831 bytes)
Hash 451590dda8765e3c8c831336a4ab2e9c
d29ee0d0f0e7815e52f7193eaf34adb5a8b87fd4
14c882ce8a844d7ae9a5e01aa32715df1736a45ecab6da7f264c859aa7ca3ef7
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2021/11/Pestan%CC%83a_Web_284x213px_Mesa_de_trabajo_1.jpeg.jpg HTTP/1.1
Host: lotecruz.org.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 12:53:19 GMT
content-type: image/jpeg
content-length: 100831
last-modified: Tue, 02 Nov 2021 16:27:33 GMT
cache-control: max-age=2592000, public
expires: Mon, 17 Oct 2022 12:53:19 GMT
etag: "618166f5-189df"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
lotecruz.org.co/wp-content/themes/Loteria/fonts/fontawesome-webfont.woff2?v=4.7.0
190.61.25.23200 OK 77 kB URL HTTP/2 lotecruz.org.co/wp-content/themes/Loteria/fonts/fontawesome-webfont.woff2?v=4.7.0
IP 190.61.25.23:0
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/themes/Loteria/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: lotecruz.org.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://lotecruz.org.co/wp-content/themes/Loteria/css/font-awesome.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 12:53:19 GMT
content-type: font/woff2
content-length: 77160
last-modified: Wed, 14 Oct 2020 01:36:38 GMT
cache-control: max-age=2592000
expires: Mon, 17 Oct 2022 12:53:19 GMT
etag: "5f865626-12d68"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
lotecruz.org.co/wp-content/themes/Loteria/fonts/roboto/Roboto-Regular.woff2
190.61.25.23200 OK 65 kB URL HTTP/2 lotecruz.org.co/wp-content/themes/Loteria/fonts/roboto/Roboto-Regular.woff2
IP 190.61.25.23:0
File type Web Open Font Format (Version 2), TrueType, length 64832, version 1.0\012- data
Hash 5136cbe62a63604402f2fedb97f246f8
c193deaa915e7183828400922700567900fb6cc3
02a7cd67c545041654af047f04ce327f2df086386eab421adc16269010c50365
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/themes/Loteria/fonts/roboto/Roboto-Regular.woff2 HTTP/1.1
Host: lotecruz.org.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://lotecruz.org.co/wp-content/cache/wmac/css/wmac_single_215b23a5fbf6ac04587b22b8990f4596.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 12:53:19 GMT
content-type: font/woff2
content-length: 64832
last-modified: Wed, 14 Oct 2020 01:36:38 GMT
cache-control: max-age=2592000
expires: Mon, 17 Oct 2022 12:53:19 GMT
etag: "5f865626-fd40"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 924cca70f1f5ba02eb6af21a65e0bdd1
3baa75b1ea32068f96cfd5060e4e1eda71c61da8
e55036d990bb7071b7e51e739b8650538ce67d821cc966b0baa99ff40220973b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 703
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:52:58 GMT
Last-Modified: Sat, 17 Sep 2022 12:41:15 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Sat, 17 Sep 2022 12:41:12 GMT
expires: Sat, 17 Sep 2022 14:41:12 GMT
cache-control: public, max-age=7200
age: 706
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
31.13.72.12200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (64348)
Hash 9ecd89752214ef749272eef344b9089a
70a58a49c08934265ee34c74efb01d6b3124095d
f76c51487e348977288fcaf83984cd8fe4e73758cc352402774d9eb94680d528
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src * data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: sNs9barP+vHoKWsTIORXWalnSO6kOJa6kZkkJEim09UMXpNlHmE3oFdb3KhgvFnYZTgUcnAQwyZ0xa0ypepxxA==
content-length: 26839
x-fb-trip-id: 1904183273
date: Sat, 17 Sep 2022 12:52:58 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 924cca70f1f5ba02eb6af21a65e0bdd1
3baa75b1ea32068f96cfd5060e4e1eda71c61da8
e55036d990bb7071b7e51e739b8650538ce67d821cc966b0baa99ff40220973b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 703
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:52:58 GMT
Last-Modified: Sat, 17 Sep 2022 12:41:15 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/j/collect?v=1&_v=j96&a=300286370&t=pageview&_s=1&dl=https%3A%2F%2Flotecruz.org.co%2Fcss%2Fchasenew%2Flogin.php%3Fxbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt&ul=en-us&de=UTF-8&dt=P%C3%A1gina%20no%20encontrada&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YADAAEABAAAAAC~&jid=1809111315&gjid=1721524447&cid=562127630.1663419161&tid=UA-184498929-1&_gid=79494416.1663419161&_r=1>m=2wg9e0NCC33VD&z=525353286
142.250.74.174200 OK 1 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j96&a=300286370&t=pageview&_s=1&dl=https%3A%2F%2Flotecruz.org.co%2Fcss%2Fchasenew%2Flogin.php%3Fxbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt&ul=en-us&de=UTF-8&dt=P%C3%A1gina%20no%20encontrada&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YADAAEABAAAAAC~&jid=1809111315&gjid=1721524447&cid=562127630.1663419161&tid=UA-184498929-1&_gid=79494416.1663419161&_r=1>m=2wg9e0NCC33VD&z=525353286
IP 142.250.74.174:0
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?v=1&_v=j96&a=300286370&t=pageview&_s=1&dl=https%3A%2F%2Flotecruz.org.co%2Fcss%2Fchasenew%2Flogin.php%3Fxbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt&ul=en-us&de=UTF-8&dt=P%C3%A1gina%20no%20encontrada&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YADAAEABAAAAAC~&jid=1809111315&gjid=1721524447&cid=562127630.1663419161&tid=UA-184498929-1&_gid=79494416.1663419161&_r=1>m=2wg9e0NCC33VD&z=525353286 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://lotecruz.org.co
Connection: keep-alive
Referer: https://lotecruz.org.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://lotecruz.org.co
date: Sat, 17 Sep 2022 12:52:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lotecruz.org.co/wp-content/uploads/fbrfg/favicon-16x16.png
190.61.25.23200 OK 550 B URL HTTP/2 lotecruz.org.co/wp-content/uploads/fbrfg/favicon-16x16.png
IP 190.61.25.23:0
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 724a93018ed2ecaf0abf3016c9fc4907
6ecddc08c0cb785fc5bd09e0433bca4de821f1f6
c27ddd9d212044641cadbab201a3958307b8e9f8b1dff9f274759eb8d925b367
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/fbrfg/favicon-16x16.png HTTP/1.1
Host: lotecruz.org.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt
Cookie: _ga_6N6G3B3382=GS1.1.1663419160.1.0.1663419161.0.0.0; _ga=GA1.1.562127630.1663419161
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 12:53:19 GMT
content-type: image/png
content-length: 550
x-accel-version: 0.01
last-modified: Wed, 02 Dec 2020 14:31:19 GMT
etag: "226-5b57c18ba7bc0"
accept-ranges: bytes
cache-control: max-age=2592000, public
expires: Mon, 17 Oct 2022 12:53:19 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: PleskLin
X-Firefox-Spdy: h2
lotecruz.org.co/wp-content/uploads/fbrfg/apple-touch-icon.png
190.61.25.23200 OK 1.1 kB URL HTTP/2 lotecruz.org.co/wp-content/uploads/fbrfg/apple-touch-icon.png
IP 190.61.25.23:0
File type PNG image data, 180 x 180, 8-bit colormap, non-interlaced\012- data
Hash f1803e9bfff7cb8dd39f01c26053740b
0c23413d05ccf0ceebcd2690d4a320eb07f9f742
ef2f34a0fcd8eecdab32d51383f4b0ed46c4f2dce49f07b4457f12fc538fe1d7
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/fbrfg/apple-touch-icon.png HTTP/1.1
Host: lotecruz.org.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt
Cookie: _ga_6N6G3B3382=GS1.1.1663419160.1.0.1663419161.0.0.0; _ga=GA1.1.562127630.1663419161
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 12:53:19 GMT
content-type: image/png
content-length: 1128
last-modified: Wed, 02 Dec 2020 14:31:19 GMT
cache-control: max-age=2592000, public
expires: Mon, 17 Oct 2022 12:53:19 GMT
etag: "5fc7a537-468"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=677433972859072&ev=PageView&dl=https%3A%2F%2Flotecruz.org.co%2Fcss%2Fchasenew%2Flogin.php%3Fxbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt&rl=&if=false&ts=1663419161425&cd[userAgent]=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&cd[language]=en-US&cd[referrer]=&sw=1280&sh=1024&v=2.9.83&r=stable&a=dvpixelcaffeinewordpress&ec=0&o=30&fbp=fb.2.1663419161423.1248499868&it=1663419161322&coo=false&rqm=GET
31.13.72.36200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=677433972859072&ev=PageView&dl=https%3A%2F%2Flotecruz.org.co%2Fcss%2Fchasenew%2Flogin.php%3Fxbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt&rl=&if=false&ts=1663419161425&cd[userAgent]=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&cd[language]=en-US&cd[referrer]=&sw=1280&sh=1024&v=2.9.83&r=stable&a=dvpixelcaffeinewordpress&ec=0&o=30&fbp=fb.2.1663419161423.1248499868&it=1663419161322&coo=false&rqm=GET
IP 31.13.72.36:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=677433972859072&ev=PageView&dl=https%3A%2F%2Flotecruz.org.co%2Fcss%2Fchasenew%2Flogin.php%3Fxbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt&rl=&if=false&ts=1663419161425&cd[userAgent]=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&cd[language]=en-US&cd[referrer]=&sw=1280&sh=1024&v=2.9.83&r=stable&a=dvpixelcaffeinewordpress&ec=0&o=30&fbp=fb.2.1663419161423.1248499868&it=1663419161322&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Sat, 17 Sep 2022 12:52:58 GMT
expires: Sat, 17 Sep 2022 12:52:58 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
lotecruz.org.co/wp-content/cache/wmac/js/wmac_d7a0f46e82a3474c4fe56e3dae60d5ca.js
190.61.25.23200 OK 122 kB URL HTTP/2 lotecruz.org.co/wp-content/cache/wmac/js/wmac_d7a0f46e82a3474c4fe56e3dae60d5ca.js
IP 190.61.25.23:0
File type ASCII text, with very long lines (65356)
Size 122 kB (121707 bytes)
Hash de0129dee35fc08b598d6978d7e29eb4
b67cc009adad041cd404e2efa1853ba4024b98f1
fa5ecefb512d56cc3ae16ca474303d5a56b500042edb080ef4998a7ec2122eb0
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/cache/wmac/js/wmac_d7a0f46e82a3474c4fe56e3dae60d5ca.js HTTP/1.1
Host: lotecruz.org.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 12:53:19 GMT
content-type: application/javascript
last-modified: Thu, 25 Nov 2021 17:20:58 GMT
cache-control: max-age=216000, private
expires: Thu, 07 Sep 2023 12:53:19 GMT
etag: W/"619fc5fa-6d98c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 35f3deb94b2a985eb02f5a14f033c44f
2076e4cb6faf9a7bf1cbfc8947db9a8550f556bd
1d5c76a54a4ab121ccf5f456516ec99fb7f5129a491e078d97c749b94060970a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1D5C76A54A4AB121CCF5F456516EC99FB7F5129A491E078D97C749B94060970A"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8989
Expires: Sat, 17 Sep 2022 15:22:47 GMT
Date: Sat, 17 Sep 2022 12:52:58 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 35f3deb94b2a985eb02f5a14f033c44f
2076e4cb6faf9a7bf1cbfc8947db9a8550f556bd
1d5c76a54a4ab121ccf5f456516ec99fb7f5129a491e078d97c749b94060970a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1D5C76A54A4AB121CCF5F456516EC99FB7F5129A491E078D97C749B94060970A"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8989
Expires: Sat, 17 Sep 2022 15:22:47 GMT
Date: Sat, 17 Sep 2022 12:52:58 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 35f3deb94b2a985eb02f5a14f033c44f
2076e4cb6faf9a7bf1cbfc8947db9a8550f556bd
1d5c76a54a4ab121ccf5f456516ec99fb7f5129a491e078d97c749b94060970a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1D5C76A54A4AB121CCF5F456516EC99FB7F5129A491E078D97C749B94060970A"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8989
Expires: Sat, 17 Sep 2022 15:22:47 GMT
Date: Sat, 17 Sep 2022 12:52:58 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 35f3deb94b2a985eb02f5a14f033c44f
2076e4cb6faf9a7bf1cbfc8947db9a8550f556bd
1d5c76a54a4ab121ccf5f456516ec99fb7f5129a491e078d97c749b94060970a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1D5C76A54A4AB121CCF5F456516EC99FB7F5129A491E078D97C749B94060970A"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8989
Expires: Sat, 17 Sep 2022 15:22:47 GMT
Date: Sat, 17 Sep 2022 12:52:58 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0b772c6-a258-481b-9f13-545de0b247e7.jpeg
34.120.237.76200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0b772c6-a258-481b-9f13-545de0b247e7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 571f174a66e87ea77b36542c6c7a29a4
5dc0ef56244f8a5ddbb7823e25c61312860b2d0f
e624e35cc734b8cacc2a8eaa80c81175a879c1195d7a4c65cdcd769836b96a1b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0b772c6-a258-481b-9f13-545de0b247e7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9280
x-amzn-requestid: 5259d496-f145-492c-8825-579f5b107ee6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeKEwGsaIAMFR5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632256eb-71f620793182ed767adad592;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 22:34:19 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ILrdhzS2nnvB959D0ZhvdD_jqQKVc-gWgnt8NSzlC0s1Fb8vbHGKQQ==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 12:55:52 GMT
age: 86226
etag: "5dc0ef56244f8a5ddbb7823e25c61312860b2d0f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca80d3e7-37ec-4908-bc70-808d7f648efe.jpeg
34.120.237.76200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca80d3e7-37ec-4908-bc70-808d7f648efe.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dc2201eab308312a7429e3f22510fc27
4e4f279e66eac8989833dd5b46706aa50f6e5031
d5b73edbd1ec0eaffacf03ff232924e376d3af7447aeed6e7197177e20e2bc82
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca80d3e7-37ec-4908-bc70-808d7f648efe.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5323
x-amzn-requestid: debbdcf5-f9b1-4798-9d58-3e23847d22dc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YIQp3FdgoAMFaMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631994a5-6e0abb211dbd59e85665f1ac;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 07:07:17 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MkN8DEUY-0hYIeosGmPOK0iEmw3rBeuF-XKG5S9XM80qB2DRq0GJ-Q==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 22:28:41 GMT
age: 51857
etag: "4e4f279e66eac8989833dd5b46706aa50f6e5031"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd5675c7-5120-4f61-bd91-8c4d9af84130.jpeg
34.120.237.76200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd5675c7-5120-4f61-bd91-8c4d9af84130.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7a22ab7dcdf50f4a297b8e117d336eae
e139a0974317212f094fdbe59e26ca5cf6b9e56d
9b4c23c1bb2e4fcd140ce34bf83f315f09b45202c569cb74113c2e65c4031dcd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd5675c7-5120-4f61-bd91-8c4d9af84130.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7788
x-amzn-requestid: 2cb48f87-8b72-4ff7-b041-a6e704b854a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YIP2-HFHoAMFssA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6319935f-693e2f2e5a0bcd9f690f21fa;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 07:01:51 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 4-H_LbXRjS1PJkVz9OIhwsaPfu8ZlL98zTZG--hdmij9Tc6KtmNSFQ==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 21:51:13 GMT
age: 54105
etag: "e139a0974317212f094fdbe59e26ca5cf6b9e56d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e43d1ff-79bc-430f-826f-2af5ae602556.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e43d1ff-79bc-430f-826f-2af5ae602556.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d46a910081eb782408f1a2fa3c6aabba
28ac45ef155c66dd79a306f14d3b38f597b6a32e
d5787a6a12d275555c627e3245b37d4e751148345a09d5671b343cfebe7173b4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e43d1ff-79bc-430f-826f-2af5ae602556.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8500
x-amzn-requestid: e1ca6cef-c033-4887-80cf-2014ab8e620c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Ykn5cEnLIAMFrzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6324ed09-3afc16cf66fef0e62dd6f3cc;Sampled=0
x-amzn-remapped-date: Fri, 16 Sep 2022 21:39:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: pPCI5VDX3PIldEnkLv-VNCFWuykiarYQdLYguNTfmbwxYCDVaS2EcA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 22:01:45 GMT
age: 53473
etag: "28ac45ef155c66dd79a306f14d3b38f597b6a32e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F269c619b-7793-4ef9-ae9d-9464582f4b56.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F269c619b-7793-4ef9-ae9d-9464582f4b56.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1f1583c126dab43886a89cda3f82d760
5740a5507f21449319597ef49dbb456cbf7372b5
3b8ea2490bd6d777ec64358a84a07bdb1ccd4a6dfa30969feed45cfa7725745f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F269c619b-7793-4ef9-ae9d-9464582f4b56.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12221
x-amzn-requestid: ede87d50-8626-40bf-bb1a-d3f95e252f87
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YknUrGuqIAMF7tA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6324ec1d-2952b2ba7271a5b516295a55;Sampled=0
x-amzn-remapped-date: Fri, 16 Sep 2022 21:35:25 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 39THgu_2WIUs5Hx0CElOMyYu8f9XzzgwzO1naHT1gWJiAyo83lnzuw==
via: 1.1 d1d67b07408bba8c682597d8303642e2.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 21:50:31 GMT
age: 54147
etag: "5740a5507f21449319597ef49dbb456cbf7372b5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9ba7347-38d8-40e3-9b29-41a380f99ed5.jpeg
34.120.237.76200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9ba7347-38d8-40e3-9b29-41a380f99ed5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c35b7f5f8e1b0b24570a41b7d18533a
c5b82c9d77851820b8d206573d5c03cd36d27a20
bb2456b31c48e6ebc9595c2bb9972b74531e93dd02ec4571d5af614f2d116ec7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9ba7347-38d8-40e3-9b29-41a380f99ed5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6109
x-amzn-requestid: 271b006e-9d17-46ba-9eed-22fd638c4e9e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YQ2AhHZgIAMFlSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d039c-444e7d6b22f2a08f7215a986;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 21:37:32 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: clBnXbh8x6GItJ6ObFVEM4Es3jAKlfMS8CMGlU6RBf_eshZ_HfFkOA==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 22:31:13 GMT
age: 51705
etag: "c5b82c9d77851820b8d206573d5c03cd36d27a20"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-6N6G3B3382>m=2oe9e0&_p=300286370&cid=562127630.1663419161&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663419160&sct=1&seg=0&dl=https%3A%2F%2Flotecruz.org.co%2Fcss%2Fchasenew%2Flogin.php%3Fxbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt&dt=P%C3%A1gina%20no%20encontrada&en=page_view&_fv=1&_nsi=1&_ss=1
216.239.32.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-6N6G3B3382>m=2oe9e0&_p=300286370&cid=562127630.1663419161&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663419160&sct=1&seg=0&dl=https%3A%2F%2Flotecruz.org.co%2Fcss%2Fchasenew%2Flogin.php%3Fxbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt&dt=P%C3%A1gina%20no%20encontrada&en=page_view&_fv=1&_nsi=1&_ss=1
IP 216.239.32.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-6N6G3B3382>m=2oe9e0&_p=300286370&cid=562127630.1663419161&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663419160&sct=1&seg=0&dl=https%3A%2F%2Flotecruz.org.co%2Fcss%2Fchasenew%2Flogin.php%3Fxbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt&dt=P%C3%A1gina%20no%20encontrada&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lotecruz.org.co
Connection: keep-alive
Referer: https://lotecruz.org.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://lotecruz.org.co
date: Sat, 17 Sep 2022 12:52:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lotecruz.org.co/wp-content/themes/Loteria/css/owl.carousel.min.css
190.61.25.23200 OK 0 B URL HTTP/2 lotecruz.org.co/wp-content/themes/Loteria/css/owl.carousel.min.css
IP 190.61.25.23:0
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/themes/Loteria/css/owl.carousel.min.css HTTP/1.1
Host: lotecruz.org.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 12:53:19 GMT
content-type: text/css
last-modified: Wed, 14 Oct 2020 01:36:38 GMT
cache-control: max-age=604800, public
expires: Mon, 17 Oct 2022 12:53:19 GMT
etag: W/"5f865626-bc3"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
lotecruz.org.co/wp-content/plugins/pixelyoursite/dist/scripts/jquery.bind-first-0.2.3.min.js
190.61.25.23200 OK 0 B URL HTTP/2 lotecruz.org.co/wp-content/plugins/pixelyoursite/dist/scripts/jquery.bind-first-0.2.3.min.js
IP 190.61.25.23:0
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/pixelyoursite/dist/scripts/jquery.bind-first-0.2.3.min.js HTTP/1.1
Host: lotecruz.org.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 12:53:19 GMT
content-type: application/javascript
last-modified: Thu, 25 Nov 2021 17:13:24 GMT
cache-control: max-age=216000, private
expires: Sun, 17 Sep 2023 12:53:19 GMT
etag: W/"619fc434-525"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lobster|Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Lobster|Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i
IP 142.250.74.10:0
GET /css?family=Lobster|Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 17 Sep 2022 12:52:57 GMT
date: Sat, 17 Sep 2022 12:52:57 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lotecruz.org.co/wp-content/cache/wmac/css/wmac_single_2be68f7b0f9493df44283353eced5b62.css
190.61.25.23200 OK 0 B URL HTTP/2 lotecruz.org.co/wp-content/cache/wmac/css/wmac_single_2be68f7b0f9493df44283353eced5b62.css
IP 190.61.25.23:0
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/cache/wmac/css/wmac_single_2be68f7b0f9493df44283353eced5b62.css HTTP/1.1
Host: lotecruz.org.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 12:53:19 GMT
content-type: text/css
last-modified: Thu, 03 Dec 2020 21:33:04 GMT
cache-control: max-age=604800, public
expires: Thu, 07 Sep 2023 12:53:19 GMT
etag: W/"5fc95990-6ae5"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
lotecruz.org.co/wp-content/cache/wmac/css/wmac_single_9b01508c4038b9fbeafa9676ab7d8b62.css
190.61.25.23200 OK 0 B URL HTTP/2 lotecruz.org.co/wp-content/cache/wmac/css/wmac_single_9b01508c4038b9fbeafa9676ab7d8b62.css
IP 190.61.25.23:0
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/cache/wmac/css/wmac_single_9b01508c4038b9fbeafa9676ab7d8b62.css HTTP/1.1
Host: lotecruz.org.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 12:53:19 GMT
content-type: text/css
last-modified: Thu, 03 Dec 2020 21:33:05 GMT
cache-control: max-age=604800, public
expires: Thu, 07 Sep 2023 12:53:19 GMT
etag: W/"5fc95991-d6f8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
lotecruz.org.co/wp-content/plugins/pixelyoursite/dist/scripts/js.cookie-2.1.3.min.js
190.61.25.23200 OK 0 B URL HTTP/2 lotecruz.org.co/wp-content/plugins/pixelyoursite/dist/scripts/js.cookie-2.1.3.min.js
IP 190.61.25.23:0
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/pixelyoursite/dist/scripts/js.cookie-2.1.3.min.js HTTP/1.1
Host: lotecruz.org.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 12:53:19 GMT
content-type: application/javascript
last-modified: Thu, 25 Nov 2021 17:13:24 GMT
cache-control: max-age=216000, private
expires: Sun, 17 Sep 2023 12:53:19 GMT
etag: W/"619fc434-6ad"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
lotecruz.org.co/wp-content/cache/wmac/css/wmac_single_61dddf092b160f590a47f1779181c02f.css
190.61.25.23200 OK 0 B URL HTTP/2 lotecruz.org.co/wp-content/cache/wmac/css/wmac_single_61dddf092b160f590a47f1779181c02f.css
IP 190.61.25.23:0
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/cache/wmac/css/wmac_single_61dddf092b160f590a47f1779181c02f.css HTTP/1.1
Host: lotecruz.org.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 12:53:19 GMT
content-type: text/css
last-modified: Thu, 03 Dec 2020 21:33:04 GMT
cache-control: max-age=604800, public
expires: Thu, 07 Sep 2023 12:53:19 GMT
etag: W/"5fc95990-11832"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
lotecruz.org.co/wp-content/themes/Loteria/css/modal.min.css
190.61.25.23200 OK 0 B URL HTTP/2 lotecruz.org.co/wp-content/themes/Loteria/css/modal.min.css
IP 190.61.25.23:0
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/themes/Loteria/css/modal.min.css HTTP/1.1
Host: lotecruz.org.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 12:53:19 GMT
content-type: text/css
last-modified: Wed, 14 Oct 2020 01:36:38 GMT
cache-control: max-age=604800, public
expires: Mon, 17 Oct 2022 12:53:19 GMT
etag: W/"5f865626-d38"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
lotecruz.org.co/wp-content/plugins/pixelyoursite/dist/scripts/public.js
190.61.25.23200 OK 0 B URL HTTP/2 lotecruz.org.co/wp-content/plugins/pixelyoursite/dist/scripts/public.js
IP 190.61.25.23:0
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/pixelyoursite/dist/scripts/public.js HTTP/1.1
Host: lotecruz.org.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 12:53:19 GMT
content-type: application/javascript
last-modified: Thu, 25 Nov 2021 17:13:24 GMT
cache-control: max-age=216000, private
expires: Sun, 17 Sep 2023 12:53:19 GMT
etag: W/"619fc434-141c6"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
lotecruz.org.co/wp-includes/css/dist/block-library/style.min.css
190.61.25.23200 OK 0 B URL HTTP/2 lotecruz.org.co/wp-includes/css/dist/block-library/style.min.css
IP 190.61.25.23:0
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1
Host: lotecruz.org.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 12:53:19 GMT
content-type: text/css
last-modified: Thu, 25 Nov 2021 16:55:41 GMT
cache-control: max-age=604800, public
expires: Mon, 17 Oct 2022 12:53:19 GMT
etag: W/"619fc00d-13abe"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
lotecruz.org.co/wp-content/cache/wmac/css/wmac_single_215b23a5fbf6ac04587b22b8990f4596.css
190.61.25.23200 OK 0 B URL HTTP/2 lotecruz.org.co/wp-content/cache/wmac/css/wmac_single_215b23a5fbf6ac04587b22b8990f4596.css
IP 190.61.25.23:0
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/cache/wmac/css/wmac_single_215b23a5fbf6ac04587b22b8990f4596.css HTTP/1.1
Host: lotecruz.org.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 12:53:19 GMT
content-type: text/css
last-modified: Thu, 03 Dec 2020 21:33:04 GMT
cache-control: max-age=604800, public
expires: Thu, 07 Sep 2023 12:53:19 GMT
etag: W/"5fc95990-21f21"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
lotecruz.org.co/wp-content/themes/Loteria/css/font-awesome.min.css
190.61.25.23200 OK 0 B URL HTTP/2 lotecruz.org.co/wp-content/themes/Loteria/css/font-awesome.min.css
IP 190.61.25.23:0
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/themes/Loteria/css/font-awesome.min.css HTTP/1.1
Host: lotecruz.org.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/css/chasenew/login.php?xbautciqqjzzm3ekg8gsxpm5o8vgftibzl3skstitxgi5y2nu81cnampgk8z9tmaoyft3etvplx4hkbydmn45v342cy0hhepbb693hnyz5go9uqbicnyssi1xxoafbbh3nl9t6he14ryiof2a1ytk1g6ldjx5w9yejf54drluiysvu9bmvqixbozuufrlkhihjw6yrzt
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 12:53:19 GMT
content-type: text/css
last-modified: Wed, 14 Oct 2020 01:36:38 GMT
cache-control: max-age=604800, public
expires: Mon, 17 Oct 2022 12:53:19 GMT
etag: W/"5f865626-7918"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
tracker.metricool.com/app/resources/be.js
104.26.3.144200 OK 0 B URL HTTP/2 tracker.metricool.com/app/resources/be.js
IP 104.26.3.144:0
GET /app/resources/be.js HTTP/1.1
Host: tracker.metricool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lotecruz.org.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 17 Sep 2022 12:52:58 GMT
content-type: application/javascript
cache-control: max-age=172800
cf-bgj: minify
expires: Sun, 18 Sep 2022 12:54:52 GMT
last-modified: Fri, 16 Sep 2022 08:36:38 GMT
pragma: no-cache
cf-cache-status: HIT
age: 86266
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TPI4vkb7AVPTKORIbd9lNI%2BGH8yUA5xR0F3jj%2Bruj7hb6T8S9%2FyZPQhGhGSVxyXF5CbtvLjFZh%2BvE%2FDwrgYz05mqGW4Y%2B7p0nltTmD8ohyu5VPpJV5n9I4wqR9gPHCVCGdlN0mHCBw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74c1fb674ea70afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2